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The MAILING DA TE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .1 36(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment See 37 CFR 1.704(b). 

Status 

1 )^ Responsive to communication(s) filed on 13 February 2004 . 
2a)|El This action is FINAL. 2b)n This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
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4) K Claim(s) 1-16 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) ^ Claim(s) 1-16 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8)n Claim(s) are subject to restriction and/or election requirement. 
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1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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DETAILED ACTION 



1. Claims 1-16 maintains the rejection under 35 U.S.C. 102(e), this is a 
FINAL rejection. 



The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this 

Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another 
filed in the United States before the invention thereof by the applicant for patent, or on an 
international application by another who has fulfilled the requirements of paragraphs (1), 
(2), and (4) of section 371(c) of this title before the invention thereof by the applicant for 



The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) 
prior to the amendment by the AIPA (pre-AIPA 35 U.S.C. 102(e)). 
2. Claims 1-16 are rejected under 35 U.S.C. 102(e) as being anticipated 
by Chen, Et Al. (US 5,951,698). 



Claim Rejections - 35 USC §102 



patent. 
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As per claim 1: 

Chen, Et Al. teaches a computer-implemented method for detecting a 
macro virus in code adapted for use on a digital computer, said method 
comprising the steps of: 

analyzing the code to determine whether said code contains instructions 
causing a macro to be moved to a global environment; (coL8, lines 10-22) 

when the code contains instructions causing a macro to be moved to a 
global environment, flagging said macro; (coL8, lines 38-39 and col.9, lines 
5-6) 

analyzing the code to determine whether said code contains instructions 
causing the flagged macro to be copied to a local document; and (coL8, lines 
32-33 and lines 52-57) 

when the code contains instructions causing the flagged macro to be 
copied to a local document, declaring that said flagged macro contains a macro 
virus. (coL9, lines 40-52 and coL15, lines 46-50) 
As per claim 2: 

Chen discloses the macro is contained within a module. (coL6, lines 31-36) 
As per claim 3: 

Chen discloses the code is associated with a Microsoft Excel spreadsheet 
application. (coL5, line 22) 
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As per claim 4: 

Chen discloses the code is written in the Visual Basic language. (coL7, lines 
11-13 and coL8, lines 1-4) 
As per claim 5: 

Chen discloses the step of analyzing the code to determine whether said code 
contains instructions causing a macro to be moved to a global environment 
(coi.8, lines 10-22 and lines 38-39) comprises determining whether a SaveAs 
command is present in the code. (col. 14, lines 8-10) 
As per claim 6: 

Chen discloses the step of analyzing the code to determine whether said code 
contains instructions causing the flagged macro to be copied to a local 
document (coL8, lines 38-39 and coL9, lines 5-6) comprises determining 
whether a Copy command is present in the code. (coL14, lines 16-23) 
As per claim 7: 

Chen discloses each analyzing step concatenates strings when said analyzing 
step encounters a concatenation operator within the code. (coL16, lines 14- 
40) 

As per claim 8: 

Chen discloses each analyzing step makes substitutions for variable names 
when the code contains variable names that are proxied. (coL14, lines 55- 
64) 
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As per claim 9: 

Chen discloses each analyzing step traces the values of parameter variables 
when the code contains instructions that are invoked by other code. (coL14, 
lines 30-52 and col. 16, lines 44-48) 
As per claim 10: 

Chen discloses each analyzing step substitutes object names when the code is 
written in an object oriented programming language and when the code 
contains substituted object names. (coL14, lines 55-64) 
As per claim 11: 

Chen discloses the step of deleting the macro virus. (coLll, lines 32-33) 
As per claim 12: 

Chen discloses the publicly identified and publicly unidentified macro viruses 
are detected. (cdL9, lines 34-37) 
As per claim 13: 

Chen teaches a method for detecting publicly identified and publicly 
unidentified macro viruses in code adapted for use on a digital computer, said 
method comprising the steps of: 

analyzing the code to determine whether said code contains instructions 
causing a macro to be moved to a global environment; (coLS, lines 10-22) 

when the code does not contain instructions causing a macro to be 
moved to a global environment, declaring that no macro virus is present; 
(col.6, lines 54-63 and col.8, lines 17-18) 
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when the code contains instructions causing a macro to be moved to a 
global environment, flagging said macro; (col.8, lines 38-39 and coL9, lines 
43-63) 

analyzing the code to determine whether said code contains instructions 
causing the flagged macro to be copied to a local document; and (coL8, lines 
52-57 and col. 13, lines 34-62) 

when the code does not contain instructions causing the flagged macro 
to be copied to a local document, declaring that no macro virus is present; and 
(coL12, lines 35-39) 

when the code contains instructions causing the flagged macro to be 
copied to a local document (col.8, lines 32-33 and lines 52-57), declaring that 
said flagged macro contains a macro virus, (col.9, lines 40-52 and col. 15, 
lines 46-50) 
As per claim 14: 

Chen teaches an apparatus for detecting publicly identified and publicly 
unidentified macro viruses, said apparatus comprising: 

a digital computer having at least one storage device; 

associated with said digital computer, code containing computer 
instructions (coL5, lines 3-6) 

application program associated with said computer; (col.5, lines 10- 

14) 
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global environment associated with said application program; (coL5, 
lines 22-46 and col. 8, lines 7-17) 

at lease one local document generated by said application program and 
located within said storage device; and (col.6, lines 39-45) 

a detection module coupled to said code, said detection module analyzing 
said code and making the determination that a macro virus is present (coL6, 
lines 38-43) when said code contains instructions causing a macro to be 
moved to a global environment (col.8, lines 10-22 and lines 38-39) and said 
code also contains instructions causing the same macro to be copied to a local 
document, (col.8, lines 52-57 and coL13, lines 34-62) 
As per claim 15: 

Chen teaches a repair module coupled to the detection module and to the code, 
said repair module (coL9, lines 30-47) adapted to delete the code when the 
detection module determines that the code contains a macro virus, (coL9, line 
51 thru col. 10, line 3) 
As per claim 16: 

Chen teaches a computer readable medium containing a computer 
program for detecting a macro virus in code adapted for use on a digital 
computer, said program containing instructions for performing the steps of: 

analyzing the code to determine whether said code contains instructions 
causing a macro to be moved to a global environment; (coL8, lines 10-22) 
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when the code contains instructions causing a macro to be moved to a 
global environment, flagging said macro; (col.8, lines 38-39 and col.9, lines 
43-63) 

analyzing the code to determine whether said code contains instructions 
causing the flagged macro to be copied to a local document; and (col. 8, lines 
32-33 and lines 52-57) 

when the code contains instructions causing the flagged macro to be 
copied to a local document (coL13, lines 34-62), declaring that said flagged 
macro contains a macro virus, (col.9, lines 40-52 and col. 15, lines 46-50) 



Response to Arguments 

3. Applicant*s arguments filed February 13, 2004 have been fully 
considered but they are not persuasive. 

The Examiner have re-evaluated the rejections and made some changes 
to the citations for the rejections using the same prior art (Chen, Et Al.). 

Chen discloses a global template file in the form of global environment, 
which provides settings and macros (see col. 8, lines 10-17) and macro 
reproduction instructions for the data file in the form of local document (see 
col.8, lines 52-57). Chen further discusses (infected) macros may be copied 
into the global template (see col.8, lines 38-39) and thereby spread to the other 
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files. Hence, there must be instructions for causing the macro to be moved to 
the global environment and copied to the local document if certain macro 
viruses cause infected document files to be saved in template formats and 
thereby the infected macros are copied into a data file (see col.8, lines 21-22 
and lines 32-33). For clarification purposes, the term to "move (d)" is relevant 
to "save", and the term "copy" is relevant to "duplicate" or "reproduce". 

It is inherent that the Visual Basic language is a trademarked name 
owned by the Microsoft Corporation and is designed for building Windows- 
based applications such as Microsoft Office including word processing and 
Excel spreadsheet. Chen's invention includes Microsoft EXCEL as a 
spreadsheet application, thus it is inherent that the code may be written in 
Visual Basic language. By Chen disclosing the WordBasic language is not 
necessarily only used for this invention but just an example (see col. 5, lines 34- 
37) of one of the variety of languages that can be used in writing for WORD 
data files (see col.7, lines 1 1-13 and col.8, lines 1-4). 

For more details on the rejections above, please refer to Chen, Et Al. on 
col.4, line 42...Et SEQ. 
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Conclusion 



4, THIS ACTION IS MADE FINAL. Applicant is reminded of the extension 
of time policy as set forth in 37 CFR 1.136(a), 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first reply 
is filed within TWO MONTHS of the mailing date of this final action and the 
advisory action is not mailed until after the end of the THREE-MONTH 
shortened statutory period, then the shortened statutory period will expire on 
the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1. 136(a) will be calculated from the mailing date of the advisory action. In 
no event, however, will the statutory period for reply expire later than SIX 
MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to LEYNNA T. HA whose telephone number is (703) 305- 
3853. The examiner can normally be reached on Monday - Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (703) 305-4393. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR 
only. For more information about the PAIR system, see http://pair-direct.uspto.gov. 
Should you have questions on access to the Private PAIR system, contact the 
Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



LHa 




